v0.1.2

Changed

• Visual Studio solution versioned with the repository (Kubuno.Stt.slnx, generated by vskubuno, the naming of
  every Kubuno repository): the server is the project Kubuno.Stt.Server, the frontend Kubuno.Stt.Web, in
  the solution folders Server, Libraries and Frontend, with the shared launch profile "Stt (Kubuno Core + browser)".
  The crate and npm names do not change.

Security

• Every route now requires the caller to be signed in through Kubuno. The module used to answer anyone who
  could reach its port: transcription (/transcribe, the /stream WebSocket) was open, and the administration
  routes (enable/disable, settings, model downloads and deletions) trusted a plain X-Kubuno-User-Role: admin
  header that any local process could send. Requests must now carry the short-lived identity token the core signs
  for this module (X-Kubuno-Auth, verified with kubuno-modauth); the administrator role is read from that token
  only, and a module started without its internal secret refuses everything but /health.
• Model names are checked before they become file names. Deleting a model refuses an engine or model name
  containing anything but letters, digits, ., _ and - (no path separators, no ..).

Fixed

• Identical files on every OS. The repository now pins line endings to LF
  (.gitattributes), so a checkout on Windows no longer turns scripts,
  manifests or sources into CRLF, and what is built or packaged from it is the
  same whichever OS checks it out.

• The module's description names the engine it actually runs. It still
  said Vosk, which was removed when the module became Whisper-only.

Removed

• The build no longer downloads the Vosk shared library. The engine was
  dropped in 0.1.0 but the release pipeline still fetched its library on every
  run, making each build depend on a third-party download it had no use for.